I have followed this post: [image] Customize SAML Assertions Describes how to customize SAML assertions and the SAML and WS-Fed protocol parameters. to a very simple implementation. No filtering for an application/client ID, no resolving of existing data an…

Hi again! As far as I have checked on the tenant, the configuration of the SAML Addon looks fine, however, the only issues that I noticed are: The action in which you add the attribute does not appear to be bound, I can see that it has been deployed but not bound to any trigger. In similar fashio…

Hi @jonathan.hughes Just to make sure, in your scenario, your Auth0 Tenant acts as the IdP for the SAML connection used right? If that is correct, by simply using the code you provided inside a Post-Login Action the custom attribute should be visible. I have tested this out on my end and when I de…

Yes, I am using Auth0 as the IdP. I do agree that it should work, but it’s not. My service provider has similar logging where I see all the attributes from the response and there is no difference in that result or that tool, the custom claim just isn’t there.

@nik.baleca Were you using the SAML2 Web App add on during your test or some other setup? If so, did you use this value in the mappings section or not? Looking to find any difference in what you tested vs what i’m doing.

Yes, I am using the SAML2 Web App Addon. I have not changed any mappings in the addon’s setting page, I have only added the same code as you did in the Post-Login Action: exports.onExecutePostLogin = async (event, api) => { api.samlResponse.setAttribute("http://example.com/protoTypeName", "protoTy…

I am only expecting these to show up in the response, not the user profile. I can extract the response from the service provider logs or web traffic both are identical and missing this attribute. I am using just the default configuration with updated URL’s from the add on example. Is there someth…

Hi again, Inside the SAML2 Addon, can you try mapping this flag and let me know if there are any differences? "mapUnknownClaimsAsIs": true Kind Regards, Nik

By any chance, even if the custom attribute is not forwarded in the SAML Response, is it by any chance available in the user’s RAW JSON under User Management → Users → Select SAML User → RAW JSON? Kind Regards, Nik

No, the attribute is not in the RAW JSON.

Could you send me a DM with the tenant name so I can go ahead and check out the configuration myself? Kind Regards, Nik

SAML Custom Attributes

Get Help

jonathan.hughes September 22, 2025, 5:31pm 14

Thank you for the pointer. I thought I had already created the trigger when I made the action but apparently I didn’t. The action is now running and I am seeing the attribute.

Topic		Replies	Views
Adding custom SAML attribute when auth0 is IdP Archived saml2	2	5115	January 26, 2022
Adding custom SAML attribute when auth0 is SP Archived rules , samlp , saml2	5	11151	May 9, 2018
Add custom saml attributes to id token Get Help auth0	3	4816	June 27, 2023
SAML attribute visible in SAML response but missing from Auth0 user profile Get Help connections , saml-enterprise-connection	3	97	November 13, 2025
How to remove the default saml assertions when sending the saml response to some external IDP Archived saml , saml2	3	4460	June 26, 2019

SAML Custom Attributes

Related topics